Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/BEYIXI3zXhSueqOcM5noWIMGorU.mft
File:                     BEYIXI3zXhSueqOcM5noWIMGorU.mft (raw, json)
Hash identifier:          qxmVGECLeyoEupAkIXov58N3t9fCuaCphpInL8KS/Iw=
Subject key identifier:   41:83:0B:24:0E:1C:B7:EB:28:D7:18:48:54:7C:7B:21:15:99:06:C7
Authority key identifier: 04:46:08:5C:8D:F3:5E:14:AE:7A:A3:9C:33:99:E8:58:83:06:A2:B5
Certificate issuer:       /CN=0446085c8df35e14ae7aa39c3399e8588306a2b5
Certificate serial:       018BDB703578731A2600B40E9FB308FEC88D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BEYIXI3zXhSueqOcM5noWIMGorU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/BEYIXI3zXhSueqOcM5noWIMGorU.mft
Manifest number:          085F
Signing time:             Fri 17 Nov 2023 04:00:45 +0000
Manifest this update:     Fri 17 Nov 2023 04:00:45 +0000
Manifest next update:     Sat 18 Nov 2023 04:00:45 +0000
Files and hashes:         1: BEYIXI3zXhSueqOcM5noWIMGorU.crl (hash: gN/dh/EDT9gqrj5GJB4UoHNyR5cUz5Jqe+8K4+g0hr0=)
                          2: mU3FZeC6E1rGHiitAF-Nu200MO4.roa (hash: y8bUKQW0VQRV65K6GfDZrKwbsCfO8o5TzidrxbxeG9M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:db:70:35:78:73:1a:26:00:b4:0e:9f:b3:08:fe:c8:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0446085c8df35e14ae7aa39c3399e8588306a2b5
        Validity
            Not Before: Nov 17 04:00:45 2023 GMT
            Not After : Nov 18 04:00:45 2023 GMT
        Subject: CN=41830b240e1cb7eb28d71848547c7b21159906c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:64:f7:69:ef:10:3b:e0:e3:8d:9e:70:e3:a9:
                    38:dd:43:df:75:b0:c8:9b:0a:ac:df:1a:ce:3b:62:
                    cd:75:2a:0b:5c:04:8e:05:f5:cc:48:09:27:c5:dc:
                    a0:26:9b:31:b9:2f:65:f3:b0:6a:db:e3:08:4f:85:
                    78:8a:61:6e:90:79:4e:a9:9d:db:64:84:58:8a:72:
                    e1:71:70:f0:1f:8d:6f:92:41:15:df:e9:92:49:24:
                    1f:cf:6e:53:6c:b8:6a:86:b3:75:30:ed:c6:97:bf:
                    10:6c:2e:6c:7d:54:70:00:f4:68:a9:0f:8f:94:73:
                    74:18:09:54:13:81:74:ee:83:c6:59:b8:53:ac:3e:
                    7d:27:2c:9d:8d:ac:26:77:ff:d5:7c:aa:b3:ab:5f:
                    22:4f:1e:d5:a6:3f:4c:c3:a1:2d:e2:f9:b4:89:ce:
                    a9:cb:f0:8d:50:5f:f5:7b:32:9d:9d:0e:13:05:8d:
                    f3:e7:1c:fc:36:50:19:1d:63:51:61:4f:a1:5d:fe:
                    1a:31:1e:61:a2:eb:0a:a1:83:40:6f:28:b8:61:00:
                    64:cb:5a:3c:b2:4e:8f:e4:1f:a2:47:4b:ba:08:70:
                    79:5b:2e:8d:c9:9c:4f:07:9c:da:15:7b:49:9f:3e:
                    f7:53:b0:86:3f:0d:9a:66:27:e5:96:7a:46:90:7d:
                    fe:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:83:0B:24:0E:1C:B7:EB:28:D7:18:48:54:7C:7B:21:15:99:06:C7
            X509v3 Authority Key Identifier:
                keyid:04:46:08:5C:8D:F3:5E:14:AE:7A:A3:9C:33:99:E8:58:83:06:A2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEYIXI3zXhSueqOcM5noWIMGorU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/BEYIXI3zXhSueqOcM5noWIMGorU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7c005a-1895-46a9-a560-b1c69bed71df/1/BEYIXI3zXhSueqOcM5noWIMGorU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:d5:fb:33:d6:4b:bd:b6:b5:cf:b7:f1:bd:39:d2:2f:3b:23:
         2e:22:eb:66:91:98:57:1c:2b:c5:8e:ab:8e:21:19:d6:61:ea:
         41:08:d4:68:a6:ec:3f:3f:41:7b:fc:0b:2f:5f:6f:06:2c:c5:
         0f:61:c7:ce:3e:b4:6d:de:02:a2:51:df:c2:18:9e:d2:a3:94:
         51:ea:11:a2:ba:a2:30:7d:0b:f2:c1:6a:91:57:c9:91:64:8c:
         6b:fa:d9:c0:c0:b2:48:ae:e7:8d:cd:60:a5:bd:92:d5:05:aa:
         85:56:63:b7:f3:c1:f3:28:80:f3:61:bd:f3:d2:b1:39:ca:1d:
         26:3f:c6:a9:b0:01:40:68:b6:7d:61:6d:4b:f1:d0:c3:c1:ed:
         d7:8a:40:8d:02:2b:03:9f:78:00:18:bd:42:08:db:5c:73:90:
         7f:76:49:19:c7:64:e5:02:87:f6:99:e8:56:89:04:67:5b:b5:
         87:a9:68:76:d5:9f:6d:80:67:40:f3:99:6d:24:30:64:8e:31:
         61:fc:ae:71:6b:ba:fb:ae:24:ae:25:21:3e:df:5e:14:31:35:
         db:78:54:9c:a7:e2:f9:73:ea:63:ec:91:5e:98:02:9a:08:75:
         89:08:1c:b9:bb:0e:c3:03:d1:30:92:12:3d:15:c8:13:7a:f1:
         b5:bb:20:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----